875 matches found
CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
PT-2021-14142
Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the blog article editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified...
PT-2021-14140
Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.4.5 Description: The issue is related to improper neutralization of JavaScript input in the page editing function, allowing remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20683: Improper Neutralization of Input During Web Page Generation
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
CVE-2021-20681: Improper Neutralization of Input During Web Page Generation
Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors...
Mcafee McAfee ePolicy Orchistrator 跨站脚本漏洞
McAfee ePolicy Orchistrator ePO is a suite of scalable security management software from McAfee. The software enables centralized, streamlined management of endpoint, network, content security and compliance solutions. A cross-site scripting vulnerability exists in McAfee ePolicy Orchestrator ePO...
CVE-2021-20629: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors...
PT-2021-14131
Name of the Vulnerable Software and Affected Versions: GROWI versions 4.2.0 through 4.2.7 Description: The issue is related to a reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters. This allows remote attackers to inject an arbitrary script via...
PT-2021-14124
Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.4705 and earlier Movable Type Advanced versions 7 r.4705 and earlier Movable Type versions 6.7.5 and earlier Movable Type Premium version 1.39 and earlier Movable Type Premium Advanced version 1.39 and earlier...
Micro Focus Solutions Business Manager 跨站脚本漏洞
Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. A cross-site...
Cross site scripting
Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors...
CVE-2021-20660
Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors...
CVE-2021-20660: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors...
PT-2021-14106
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-A affected versions not specified Description: The issue allows remote authenticated attackers to inject arbitrary script via unspecified vectors, which can lead to cross-site scripting. Recommendations: At the moment, ther...
CVE-2021-20645: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors...
PT-2021-14081
Name of the Vulnerable Software and Affected Versions: Aterm WF800HP versions 1.0.9 and earlier Description: The issue allows remote attackers to inject an arbitrary script via unspecified vectors, which can lead to cross-site scripting. Recommendations: For versions 1.0.9 and earlier, update to ...
CVE-2021-20620: Improper Neutralization of Input During Web Page Generation
Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors...
